Description
gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor.
Affected products
- GNOME / screensaver2.28.1
- GNOME / screensaver2.13 – 2.13
- GNOME / screensaver2.20 – 2.20
- GNOME / screensaver2.20.0 – 2.20.0
- GNOME / screensaver2.26.1 – 2.26.1
- GNOME / screensaver2.28.0 – 2.28.0
References
- VENDOR_ADVISORYhttp://secunia.com/advisories/38468
- MISChttp://www.osvdb.org/62219
- MISChttp://www.securityfocus.com/bid/38149
- VENDOR_ADVISORYhttp://www.ubuntu.com/usn/USN-898-1
- VENDOR_ADVISORYhttp://secunia.com/advisories/38532
- MISChttps://bugzilla.redhat.com/show_bug.cgi?id=562217
- MISChttp://git.gnome.org/browse/gnome-screensaver/commit/?id=a5f66339be6719c2b8fc478a1d5fc6545297d950
- VENDOR_ADVISORYhttp://secunia.com/advisories/38534
- MISChttp://git.gnome.org/browse/gnome-screensaver/commit/?id=dcca89b7ab6e1220815af38da246434b2e13fd9f
- VENDOR_ADVISORYhttp://www.mandriva.com/security/advisories?name=MDVSA-2010:040
- MISChttps://bugzilla.gnome.org/show_bug.cgi?id=609337
- MISChttp://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.2.news
- MAILING_LISThttp://lists.fedoraproject.org/pipermail/package-announce/2010-February/034904.html
Updated 28m ago · 2 sources